#!/bin/bash
# The following may be heavily borrowed from, if not 
# copied from, the NSA's December 20, 2007 "Guide to the 
# Secure Configuration of Red Hat Enterprise Linux 5, Revision 2"

# Title - diable Services Used Only by NFS

#Initialize variables
export PRECHECK="checkService nfs off; checkService nfslock off; checkService rpcgssd off; checkService rpcidmapd off;"
export QUESTION="Would you like to disable NFS client and all associated daemons?"
export DESCRIPTION="All of these daemons run with elevated privileges, and many listen for network connections. If they are not needed, they should be disabled to improve system security posture."
export SOLUTION="chkconfig nfs off; chkconfig nfslock off; chkconfig rpcgssd off; chkconfig rpcidmapd off" 